The operating system for enterprise risk

Every module a regulated risk function needs — on one record.

RiskAlign launches with six modules that talk to each other. Update a control once and the risk, the KRI, the appetite view and the board pack all move with it.

01
Enterprise risk register

The book of record — not a spreadsheet with extra steps.

  • Taxonomy pre-loaded for regulated firms (Strategic, Conduct, Financial Crime, Cyber, Climate, Third Party…).
  • Inherent, residual and target scoring with rationale captured per change.
  • Owner, last-reviewed date and review cadence enforced at the row.
  • Filter, group, save views — your CRO view differs from your control owner view.
02
Appetite & tolerance

Board-set limits, lived every day — not rediscovered at quarter-end.

  • Appetite statement and numeric limit per category.
  • Live tracking of current exposure vs limit, with visual on-canvas breach signals.
  • Limit changes are captured in the audit trail with a required reason.
03
Key risk indicators (KRIs)

Early-warning instruments, not lagging counts.

  • Amber / red thresholds per KRI, with visual on-canvas breach signals.
  • Trend direction and rolling window.
  • Linked to the risk it governs and the control set behind it.
04
Controls

One control library. Pulled from RegAlign where available.

  • Effectiveness rating, last test date, owner.
  • Coverage map: which risks each control mitigates.
  • Gap report: risks above appetite with weak controls.
05
Scenarios & stress

Stress the picture, capture the assumptions.

  • Combine stresses across categories.
  • Side-by-side base vs stressed residual.
  • Assumptions log for audit.
06
Board pack

Print-ready, audit-footed, one click.

  • A4 layout with heatmap, top movers, breaches, KRI trend, scenarios.
  • Auto-generated audit footer (data as-of, generator, version).
  • Export to PDF or share a tamper-evident link.

What we replace

RiskAlign replaces the spreadsheet-plus-Word-plus-email pattern.

Not a competitor swap-out — a replacement for the manual stack a mid-sized regulated risk function runs on today. Indicative annual savings at micro-cap scale:

What it replacesTime savedCost avoided / yrEvidence improved
Risk-register spreadsheets1–2 FTE-days / month£4–8kVerification + audit trail
Board-pack assembly (Word)2–3 FTE-days / quarter£6–10kOne-click, audit-footed
KRI chasing by email0.5 FTE-day / month£2kThreshold-driven
Manual action logs0.5 FTE-day / month£2kClosure notes enforced
Consultancy-built RCSAOne-off saving£8–25kMethodology + library

Indicative, not contractual. Numbers are defensible by reference; the first pilot converts them to citable claims.

See the modules running with realistic firm data.